Jails: allow raw sockets

security.jail.allow_raw_sockets MIB entry determines whether or not prison root is allowed to create raw sockets. Setting this MIB to 1 allows utilities like ping and traceroute to operate inside the prison. Type the following command:

# sysctl security.jail.allow_raw_sockets=1

Now login to jail using jexec:

host # jexec 1 csh
jail# ping cyberciti.biz

Add following line to sysctl.conf:

# echo 'security.jail.allow_raw_sockets=1' >> /etc/sysctl.conf

In an iocage situation you need to set it with the iocage program:

root@hermeticum:~ # iocage set allow_raw_sockets=1 hypnos
allow_raw_sockets: 0 -> 1